58 matches found
CVE-2013-4651
Siemens Scalance W7xx devices (firmware before 4.5.4) use a hard-coded SSL certificate for the management interfaces, enabling possible MITM attacks on SSL sessions by exploiting the trust in that certificate. Affected products include SCALANCE W744-1/1PRO, W746-1/1PRO, W747-1/1RR, W784-1/1RR, W7...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004)
This host is missing an important security update according to Mac OS X 10.5.8 Update/Mac OS X Security Update 2011-004. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-004.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-004 Authors: Antu Sanadi Copyright:...
Mac OS X Multiple Vulnerabilities (Security Update 2011-004)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-004 applied. This update contains security- related fixes for the following components : - AirPort - App Store - ColorSync - CoreGraphics - ImageIO - Libsystem - libxslt - MySQL - patch - Samba -...
Fedora Update for patch FEDORA-2011-1272
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-4651
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...
CVE-2010-4651
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...
CVE-2010-4651
CVE-2010-4651 concerns a directory traversal vulnerability in GNU patch
CVE-2010-4651
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...
Fedora 14 : patch-2.6.1-8.fc14 (2011-1272)
Applied fix so that malicious patches cannot create files above the current directory CVE-2010-4651. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 13 : patch-2.6.1-8.fc13 (2011-1269)
Applied fix so that malicious patches cannot create files above the current directory CVE-2010-4651. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
CVE-2009-4651
Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...
CVE-2009-4651
CVE-2009-4651 affects Joomla! through the Webee Comments (com_webeecomment) component versions 1.1.1, 1.2, and 2.0. The root cause is cross-site scripting (XSS) in the way BBCode tags (color, img, url) are processed, allowing remote attackers to inject arbitrary script or HTML via unspecified vec...
CVE-2009-4651
creationtimestamp| type| source ---|---|--- 2009-11-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33638...
CVE-2008-4651
CVE-2008-4651 affects Jetbox CMS 2.1 with multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands. The issues are triggered via (1) the orderby parameter to admin/cms/images.php and (2) the nav_id parameter in an editrecord action to admin/cm...
CVE-2007-4651
CVE-2007-4651 affects Adobe Connect Enterprise Server 6. The connected sources indicate an input validation issue that allows non‑admin users to access pages intended for administrators, causing an information disclosure vulnerability (restricted pages readable by non‑admins). Details in the Seeb...
CVE-2006-4651
The CVE-2006-4651 issue concerns a directory traversal vulnerability in threesquared.net’s PHP download functionality (download/index.php and possibly download.php). The root cause is improper handling of the file parameter, allowing an attacker to use .. sequences to overwrite arbitrary local fi...
CVE-2005-4651
The CVE-2005-4651 entry describes an SQL injection vulnerability in index.php of AlstraSoft EPay Pro 2.0, exploitable via the pmodule parameter to execute arbitrary SQL commands remotely. Affected component: index.php in AlstraSoft EPay Pro 2.0; root cause is injectable SQL through pmodule. Docum...